5eed1a056cc4391ec5cd4eb962348d5f7eba466bd332aea4bd5eaaaf86f536c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5eed1a056cc4391ec5cd4eb962348d5f7eba466bd332aea4bd5eaaaf86f536c9
Size

1.1MB
Sample

240908-fbyl6axcpm
MD5

8025a9f815a11dfc7b93a6d134c2acd3
SHA1

3c4fc7a1c0e5cf0ebd883646a3506dab0a9b7095
SHA256

5eed1a056cc4391ec5cd4eb962348d5f7eba466bd332aea4bd5eaaaf86f536c9
SHA512

d314423b27d30072bb779c05b13e054ff1e1a4359f61a1863a844960644cba6071c6223b9adfee24ab5844d875509b365afa0f6b7dbac2c450f19fe0528f61b9
SSDEEP

24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Q+:acallSllG4ZM7QzM1

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5eed1a056cc4391ec5cd4eb962348d5f7eba466bd332aea4bd5eaaaf86f536c9
- Size
  
  1.1MB
- MD5
  
  8025a9f815a11dfc7b93a6d134c2acd3
- SHA1
  
  3c4fc7a1c0e5cf0ebd883646a3506dab0a9b7095
- SHA256
  
  5eed1a056cc4391ec5cd4eb962348d5f7eba466bd332aea4bd5eaaaf86f536c9
- SHA512
  
  d314423b27d30072bb779c05b13e054ff1e1a4359f61a1863a844960644cba6071c6223b9adfee24ab5844d875509b365afa0f6b7dbac2c450f19fe0528f61b9
- SSDEEP
  
  24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Q+:acallSllG4ZM7QzM1
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2